Linux · Red Hat · Security advisory · June 24, 2026

RHSA-2026:34354: Security update for 37 packages

RHSA-2026:34354, released June 24, 2026, fixes 6 CVEs across 37 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0089
59th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
apcu-panelRHEL 80:5.1.18-1.module+el8.10.0+22485+a3539972
libzipRHEL 80:1.6.1-1.module+el8.10.0+22485+a3539972
libzip-develRHEL 80:1.6.1-1.module+el8.10.0+22485+a3539972
libzip-toolsRHEL 80:1.6.1-1.module+el8.10.0+22485+a3539972
phpRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-bcmathRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-cliRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-commonRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-dbaRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-dbgRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-develRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-embeddedRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-enchantRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-ffiRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-fpmRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-gdRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-gmpRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-intlRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-jsonRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-ldapRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-mbstringRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-mysqlndRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-odbcRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-opcacheRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-pdoRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-pearRHEL 81:1.10.13-1.module+el8.10.0+22485+a3539972
php-pecl-apcuRHEL 80:5.1.18-1.module+el8.10.0+22485+a3539972
php-pecl-apcu-develRHEL 80:5.1.18-1.module+el8.10.0+22485+a3539972
php-pecl-rrdRHEL 80:2.0.1-1.module+el8.10.0+22485+a3539972
php-pecl-xdebugRHEL 80:2.9.5-1.module+el8.10.0+22485+a3539972
php-pecl-zipRHEL 80:1.18.2-1.module+el8.10.0+22485+a3539972
php-pgsqlRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-processRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-snmpRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-soapRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-xmlRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e
php-xmlrpcRHEL 80:7.4.33-4.module+el8.10.0+24352+91532d3e

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-6722 php-pecl-xdebug3: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP:...9.8 0.0089 None reported
High CVE-2026-7262 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server8.2 0.0078 None reported
High CVE-2026-7568 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server8.2 0.0046 None reported
High CVE-2026-7258 Out-of-bounds read in urldecode() on NetBSD8.2 0.0036 None reported
High CVE-2026-7261 apcu-panel: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * PHP: PHP:...9.8 0.0030 None reported
High CVE-2026-6735 XSS within PHP-FPM status endpoint8.2 0.0019 None reported
Showing 1 to 6 of 6 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.